[Samba] Domain admin has no access to C:\Windows\system32\rundll32.exe

[James B. Byrne]

On Thu, August 6, 2020 14:42, James B. Byrne wrote:
>
> On Thu Aug 6 17:14:11 UTC 2020 Rowland penny rpenny at samba.org wrote:
>>
>> No, either case will work on Linux.
>>
>> How did you log into the laptop ?
>>
>> did you just log in as 'Administrator' or as 'BROCKLEY\Administrator' ?
>
> Originally I logged in as BROCKLEY\administrator.  I also logged on as
> BROCKLEY\Administrator and that was converted to BROCKLEY\administrator by Win
> 10 during the logon process.
>
> I also added BROCKLEY\administrator to the local Admins group without solving
> the problem.
>

An answer is found here

https://social.technet.microsoft.com/Forums/en-US/fb3bad72-82fb-4d74-9777-ddff71692707/domain-administrator-no-permissions-local-admin-has-permissions?forum=win10itprogeneral

For your question, please run gpedit.msc to open Group Policy Editor, then
switch to Computer Configuration---> Windows Settings---> Security Settings
---> Local Policies---> Security Options, then enable "User Account Control:
Admin Approval Mode for the Built-in Administrator account", after all restart
Windows to take effect. Figure as below:


I have not tried it yet. I will let you know how it goes.


-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
   Unencrypted messages have no legal claim to privacy
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3